about 12 hours ago
Remote, CanadaSenior / Mid Level
H1B Sponsor
Responsibilities
- Own and scale Mozilla’s web bug bounty program, including strategy and continuous improvement.
- Act as the primary interface with external researchers and platforms like HackerOne.
- Lead triage and technical validation of incoming reports across multiple channels.
- Drive end-to-end vulnerability remediation with engineering teams.
- Identify root causes and influence long-term improvements in secure development practices.
- Collaborate with the Security Incident Response Team on active incidents.
- Perform targeted code reviews during investigations and high-risk changes.
- Develop or leverage tooling to improve triage efficiency and program insights.
Requirements
- 3+ years of experience in a security engineering role.
- Experience operating bug bounty programs and bug hunting.
- Practical experience with modern cloud technologies like AWS and Google Cloud.
- Experience analyzing code and systems to prevent vulnerabilities.
- Real-world experience in software development or engineering operations.
- Ability to develop tools in various programming languages is a plus.
- Strong communication, collaboration, and problem-solving skills.
Benefits
- Generous performance-based bonus plans.
- Rich medical, dental, and vision coverage.
- Generous retirement contributions with immediate vesting.
- Quarterly wellness days for all employees.
- Country-specific holidays plus a day off for your birthday.
- One-time home office stipend and annual professional development budget.
- Considerable paid parental leave and employee referral bonus program.